Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cbd7336f-b4d2-4b1e-a772-365ecdca8061.cer
File: cbd7336f-b4d2-4b1e-a772-365ecdca8061.cer (raw, json)
Hash identifier: eLfqnknTItPZgZy6YB8doO8PlAb0AiwRnZWzvxDOUnU=
Subject key identifier: AE:20:32:A8:2B:5D:E3:FD:69:24:76:27:01:48:0F:23:95:D9:4D:20
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F4328583E327AAE33EDE5493E80F722C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cbd7336f-b4d2-4b1e-a772-365ecdca8061/cbd7336f-b4d2-4b1e-a772-365ecdca8061.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cbd7336f-b4d2-4b1e-a772-365ecdca8061/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 10 Jun 2022 22:15:07 +0000
Certificate not after: Wed 14 Apr 2032 13:47:42 +0000
Subordinate resources: AS: 26309
AS: 26393
AS: 26628
AS: 27300
AS: 30025
AS: 46500
AS: 400074
IP: 23.152.192.0 -- 23.152.194.255
IP: 23.174.176.0/24
IP: 64.234.224.0/22
IP: 149.112.14.0 -- 149.112.16.255
IP: 149.112.23.0/24
IP: 149.112.33.0 -- 149.112.38.255
IP: 172.82.0.0/22
IP: 206.80.232.0/24
IP: 2001:504:79::/48
IP: 2001:504:106:: -- 2001:504:108:ffff:ffff:ffff:ffff:ffff
IP: 2001:504:113::/48
IP: 2001:504:119::/48
IP: 2001:504:120:: -- 2001:504:124:ffff:ffff:ffff:ffff:ffff
IP: 2620:134:1000::/44
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:32:7a:ae:33:ed:e5:49:3e:80:f7:22:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Jun 10 22:15:07 2022 GMT
Not After : Apr 14 13:47:42 2032 GMT
Subject: CN=cbd7336f-b4d2-4b1e-a772-365ecdca8061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:06:49:88:cd:76:a0:73:df:2f:d9:8c:e3:33:
62:d9:3e:87:82:15:14:74:8f:35:7d:85:75:77:c8:
15:9b:6d:7a:cc:a1:31:6a:94:f8:47:12:18:88:43:
e9:9d:83:0f:5d:65:56:e0:22:47:cf:ed:eb:e6:c1:
88:be:d3:ac:bb:18:11:03:bb:e9:9d:e9:06:f6:88:
18:ab:e4:80:bd:a2:46:f5:06:60:80:47:98:66:5a:
75:8a:7b:2f:f4:4a:a5:1a:29:07:29:9f:d0:3d:4b:
19:99:f6:f8:36:19:08:52:4b:20:21:66:f0:a7:db:
db:37:16:e6:4a:3a:e2:46:94:f1:df:1e:c5:c1:02:
e8:d4:59:be:f3:c8:ed:6f:a8:77:c0:99:39:60:4c:
4e:3f:6b:3f:86:1b:22:78:ad:e1:b2:73:69:d4:60:
44:1f:5a:c8:46:e4:ab:11:51:48:12:ef:fc:34:40:
45:9d:7d:50:9a:df:76:64:4d:ee:cf:ad:80:fd:62:
03:37:38:be:63:32:e6:58:57:e1:d6:f4:ce:d4:10:
39:97:42:af:04:ad:d8:d2:94:c8:fa:79:e5:16:dd:
fb:98:b7:27:b8:b6:f3:8e:d0:c5:60:43:0c:c9:8e:
b3:75:0d:80:71:c1:e8:c8:d4:7c:89:6c:df:32:ff:
61:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:20:32:A8:2B:5D:E3:FD:69:24:76:27:01:48:0F:23:95:D9:4D:20
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cbd7336f-b4d2-4b1e-a772-365ecdca8061/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cbd7336f-b4d2-4b1e-a772-365ecdca8061/cbd7336f-b4d2-4b1e-a772-365ecdca8061.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
23.152.192.0-23.152.194.255
23.174.176.0/24
64.234.224.0/22
149.112.14.0-149.112.16.255
149.112.23.0/24
149.112.33.0-149.112.38.255
172.82.0.0/22
206.80.232.0/24
IPv6:
2001:504:79::/48
2001:504:106::-2001:504:108:ffff:ffff:ffff:ffff:ffff
2001:504:113::/48
2001:504:119::/48
2001:504:120::-2001:504:124:ffff:ffff:ffff:ffff:ffff
2620:134:1000::/44
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
26309
26393
26628
27300
30025
46500
400074
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:f7:40:e5:de:dd:cc:45:72:41:50:b6:27:9e:f7:02:4f:78:
c4:4a:c2:b9:ce:e4:73:dc:dc:3c:7f:d3:f0:b4:b9:93:04:de:
41:ca:00:58:bc:6d:85:87:15:8b:57:43:7e:03:e9:dd:6f:95:
04:ae:60:84:0b:4b:fe:66:a9:00:39:ad:5b:2b:d3:3c:e5:4e:
24:57:d2:38:fd:5b:1b:57:f3:cb:30:de:9c:10:7a:4c:00:8e:
90:80:95:58:8c:e7:50:ae:5f:7c:d0:8a:06:39:4a:0a:ac:dc:
88:19:39:ac:67:32:12:3b:1f:41:9c:2a:dd:26:cd:cc:18:be:
a0:56:2d:65:53:5b:60:93:1b:8d:91:9e:a0:5a:fd:1d:13:87:
de:77:f3:c1:f2:0f:e8:ca:4b:07:d6:2d:e0:0e:2d:fb:95:f4:
ad:4a:d5:dd:8a:4f:d4:e5:df:4e:70:69:5b:ae:0c:3b:00:8a:
b6:0b:b9:45:64:00:73:13:e9:f1:41:22:82:af:8c:f3:72:40:
9b:e0:0a:55:68:5c:67:43:83:74:bf:ec:66:63:90:d3:79:70:
ce:e4:ee:7c:11:38:a1:43:eb:0e:37:95:be:02:40:21:23:fa:
5e:48:f5:c6:e2:c7:e1:3c:74:64:63:2e:0c:48:dc:3a:d3:f7:
09:e9:f7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:47 2023 by rpki-client on console-fra.rpki-client.org